KLA11068 Denial of Service Vulnerability in Microsoft .NET Framework

Detect date:

07/11/2017

Severity:

Warning

Description:

An improper handling of web requests has been found in Microsoft Common Object Runtime Library. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited by issuing specially designed requests to the .NET web application.

Affected products:

Microsoft .NET Framework 4.6
Microsoft .NET Framework 4.6.1
Microsoft .NET Framework 4.6.2
Microsoft .NET Framework 4.7

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2017-8585

Impacts:

DoS

Related products:

Microsoft .NET Framework

CVE-IDS:

CVE-2017-85855.0Warning

Microsoft official advisories:

KB list:

4025342
4025339
4025344
4025338